Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 04:09

General

  • Target

    2796d10bd36cbde4ba4b171a9dc6835f.pdf

  • Size

    84KB

  • MD5

    2796d10bd36cbde4ba4b171a9dc6835f

  • SHA1

    61d2c032dd9bbaf1b767d11536d9167db95917b5

  • SHA256

    ecee6642078d81161aac91c45da0400250ec095a25c05347ccdeb57e7d967bd6

  • SHA512

    41385af97450f7b0b85cb2ef9b47fdcb4fb7ff9a24792177a174f67187f0e4ebcc7c043ce154ea23b004c371c43b0208a0d5ca8e685fd5c8ce4b1c17a6f1091a

  • SSDEEP

    1536:qOQlogT4s1KiRMsTXz6iLtmup/ufbFqeEZyT83TWHpOvTWIWsk2vudlpGvEnU:JQloabRMs3LtXp/uJcyTGvRedlI7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2796d10bd36cbde4ba4b171a9dc6835f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9b4a8600bf23a7e7e396d0a2f5e78234

          SHA1

          e32caf272e9a705fc09dba0a56caa99e6a2d01af

          SHA256

          e7caab6dd0b99aec6a10a3d1a23b508c4936c968a41ff1f0e5932a087e805e05

          SHA512

          f56f4b847fba25f00c1c68cf38848000689df99b12b6f5758923b746df9d21aa11155735ca13e2f28278332c878f5b679b84022c62f53c1fd14495820b5663f5